Posted on 05-24-2024 10:21 AM
Hello, I applied a "Facetime Deletion" and " iMessage App Deletion" within the Restricted Software. The process name I used was -----System/Applications/FaceTime.app and /System/Applications/Messages.app
I restricted the exact process name, applied "delete application" and "kill process". Both apps still appear on the dock bar on the test Macbook laptop. Am I missing something?
Solved! Go to Solution.
05-24-2024 10:37 AM - edited 05-24-2024 10:43 AM
sure, restrictions can still kill the process and you can put up a dialog saying 'APPNAME is not allowed' etc etc..
Block the ability to sign in with an iCloud account via Config Profiles would makes these apps useless..
Posted on 05-26-2024 05:19 PM
You also don't need to use a script to Add/Remove items from the dock.
Just add them as Dock items under Settings>Computer Management>Dock Items and then you can manage them with the dock items payload in a standard policy
Posted on 05-28-2024 08:08 AM
This worked great, thank you!
Posted on 05-24-2024 10:32 AM
you can't delete them, they live on the protected system volume.
Posted on 05-24-2024 10:34 AM
Thank you! Can we at least block this app from being used?
05-24-2024 10:37 AM - edited 05-24-2024 10:43 AM
sure, restrictions can still kill the process and you can put up a dialog saying 'APPNAME is not allowed' etc etc..
Block the ability to sign in with an iCloud account via Config Profiles would makes these apps useless..
Posted on 05-25-2024 02:55 PM
You can also use a script to remove those apps and any others from the dock. Outta sight, outa mind type thing. The scrip below will remove everything from the dock and replace it with whatever you specify. There are probably better/slicker scripts out there, but this one works just fine for me.
# Don't do anything until the Dock has started
if [[ ! $(pgrep -x Dock) ]]; then
until [[ $(pgrep -x Dock) ]]; do
echo "Dock not started. Waiting 1 second..."
sleep 1
done
echo "Dock started at: $(date +"%r")"
else
echo "Dock already started"
fi
USERNAME=$(/bin/ls -l /dev/console | /usr/bin/awk '{ print $3 }')
dockutil="/usr/local/bin/dockutil"
#remove stuff
sudo -u $USERNAME $dockutil --remove all --no-restart --allhomes
#add stuff
sudo -u $USERNAME $dockutil --add '/Applications/Microsoft Outlook.app' --no-restart --allhomes
sudo -u $USERNAME $dockutil --add '/Applications/Google Chrome.app' --no-restart --allhomes
sudo -u $USERNAME $dockutil --add '/Applications/Microsoft Teams.app' --no-restart --allhomes
sudo -u $USERNAME $dockutil --add '/Applications/Microsoft Excel.app' --no-restart --allhomes
sudo -u $USERNAME $dockutil --add '/Applications/Microsoft Word.app' --no-restart --allhomes
sudo -u $USERNAME $dockutil --add '/System/Applications/System Settings.app' --no-restart --allhomes
sudo -u $USERNAME $dockutil --add '/Applications/Self Service.app' --no-restart --allhomes
#add folders
#Example of how to add a folder - sudo -u $USERNAME $dockutil --add '/Applications/' --no-restart --allhomes
#Example of how to add a folder - sudo -u $USERNAME $dockutil --add '~/Downloads/' --no-restart --allhomes
#Example of how to add a folder - sudo -u $USERNAME $dockutil --add '~/Documents/' --no-restart --allhomes
#kill Dock
sudo killall Dock
Posted on 05-26-2024 05:19 PM
You also don't need to use a script to Add/Remove items from the dock.
Just add them as Dock items under Settings>Computer Management>Dock Items and then you can manage them with the dock items payload in a standard policy
Posted on 05-28-2024 08:08 AM
This worked great, thank you!